XMGoat – Composed of XM Cyber terraform templates that help you learn about common...
XM Goat is composed of XM Cyber terraform templates that help you learn about common Azure security issues. Each template is a vulnerable...
BYOSI – Evade EDR’s The Simple Way, By Not Touching Any Of The API’s...
Evade EDR's the simple way, by not touching any of the API's they hook. Theory I've noticed that most EDRs...
PolyDrop – A BYOSI (Bring-Your-Own-Script-Interpreter) Rapid Payload Deployment Toolkit
BYOSI - Bring-Your-Own-Script-Interpreter - Leveraging the abuse of trusted applications, one is able to deliver a compatible script interpreter for a Windows,...
CloudBrute – Awesome Cloud Enumerator
A tool to find a company (target) infrastructure, files, and apps on the top cloud providers (Amazon, Google, Microsoft, DigitalOcean, Alibaba, Vultr, Linode)....
Extrude – Analyse Binaries For Missing Security Features, Information Disclosure And More…
Analyse binaries for missing security features, information disclosure and more. Extrude is in the early stages of development, and currently only supports ELF...
ModTracer – ModTracer Finds Hidden Linux Kernel Rootkits And Then Make Visible Again
ModTracer Finds Hidden Linux Kernel Rootkits and then make visible again.Another way to make an LKM visible is using the imperius trick: https://github.com/MatheuZSecurity/ImperiusDownload ModTracer
📥 DownloadDownload ModTracer...
VulnNodeApp – A Vulnerable Node.Js Application
A vulnerable application made using node.js, express server and ejs template engine. This application is meant for educational purposes only. Setup...
DockerSpy – DockerSpy Searches For Images On Docker Hub And Extracts Sensitive Information Such...
DockerSpy searches for images on Docker Hub and extracts sensitive information such as authentication secrets, private keys, and more. What is Docker? ...
Secator – The Pentester’S Swiss Knife
secator is a task and workflow runner used for security assessments. It supports dozens of well-known security tools and it is designed to...
Ashok – A OSINT Recon Tool, A.K.A Swiss Army Knife
Reconnaissance is the first phase of penetration testing which means gathering information before any real attacks are planned So Ashok is an Incredible...